← Back
CWE-922

384 CVEs • Abstraction: Class

Insecure Storage of Sensitive Information

The product stores sensitive information without properly limiting read or write access by unauthorized actors.

JSON object

Loading...

CVEs (384)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-23348
1Hcltechsw
1Hcl Launch
Jun 17, 2026
Jul 10, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
HCL Launch could disclose sensitive information if a manual edit of a configuration file has been performed.
CVE-2023-32415
1Apple
4Ipados
Iphone OsMacos+1 more
Jun 17, 2026
Jun 23, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 16.5 and iPadOS 16.5, tvOS 16.5, macOS Ventura 13.4. An app may be able to read sensitive location information.
CVE-2023-26427
1Open Xchange
1Open Xchange Appsuite Backend
Jun 17, 2026
Jun 20, 2023
N/A· v4
3.3 LOW· v3
N/A· v2
Default permissions for a properties file were too permissive. Local system users could read potentially sensitive information. We updated the default permissions for noreply.properties set during package installation. N...Show more
Default permissions for a properties file were too permissive. Local system users could read potentially sensitive information. We updated the default permissions for noreply.properties set during package installation. No publicly available exploits are known. Show less
CVE-2023-29757
1Leap
1Blue Light Filter
Jun 17, 2026
Jun 9, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
An issue found in Blue Light Filter v.1.5.5 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the SharedPreference files.
CVE-2023-29755
1Urbanandroid
1Twilight
Jun 17, 2026
Jun 9, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
An issue found in Twilight v.13.3 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the SharedPreference files.
CVE-2023-3064
1Mobatime
1Amxgt 100
Jun 17, 2026
Jun 5, 2023
N/A· v4
5.3 MEDIUM· v3
N/A· v2
Anonymous user may get the list of existing users managed by the application, that could ease further attacks (see CVE-2023-3065 and 3066)This issue affects Mobatime mobile application AMXGT100 through 1.3.20.
CVE-2023-29727
1Applika
1Call Blocker
Jun 17, 2026
May 30, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
The Call Blocker application 6.6.3 for Android allows unauthorized applications to use exposed components to delete data stored in its database that is related to user privacy settings and affects the implementation of t...Show more
The Call Blocker application 6.6.3 for Android allows unauthorized applications to use exposed components to delete data stored in its database that is related to user privacy settings and affects the implementation of the normal functionality of the application. An attacker can use this to cause an escalation of privilege attack.Show less
CVE-2023-2665
1Rosariosis
1Rosariosis
Jun 17, 2026
May 12, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Storage of Sensitive Data in a Mechanism without Access Control in GitHub repository francoisjacquet/rosariosis prior to 11.0.
CVE-2023-31150
1Selinc
10Sel 2241 Rtac Module Firmware
Sel 3350 FirmwareSel 3505 3 Firmware+7 more
Jun 17, 2026
May 10, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
A Storing Passwords in a Recoverable Format vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) database system could allow an authenticated attacker to retrieve passwords...Show more
A Storing Passwords in a Recoverable Format vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) database system could allow an authenticated attacker to retrieve passwords. See SEL Service Bulletin dated 2022-11-15 for more details. Show less
CVE-2022-44619
1Intel
1Data Center Manager
Jun 17, 2026
May 10, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Insecure storage of sensitive information in the Intel(R) DCM software before version 5.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2022-43475
1Intel
1Data Center Manager
Jun 17, 2026
May 10, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Insecure storage of sensitive information in the Intel(R) DCM software before version 5.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2023-27942
1Apple
5Ipados
Iphone OsMacos+2 more
Jun 17, 2026
May 8, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Big Sur 11.7.5, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. An app may be able to access user-se...Show more
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Big Sur 11.7.5, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. An app may be able to access user-sensitive data.Show less
CVE-2023-23542
1Apple
1Macos
Jun 17, 2026
May 8, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An app may be able to access user-sensitive data...Show more
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An app may be able to access user-sensitive data.Show less
CVE-2023-23541
1Apple
2Ipados
Iphone Os
Jun 17, 2026
May 8, 2023
N/A· v4
3.3 LOW· v3
N/A· v2
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 15.7.4 and iPadOS 15.7.4, iOS 16.4 and iPadOS 16.4. An app may be able to access information about a user’s c...Show more
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 15.7.4 and iPadOS 15.7.4, iOS 16.4 and iPadOS 16.4. An app may be able to access information about a user’s contacts.Show less
CVE-2022-43877
1Ibm
1Urbancode Deploy
Jun 17, 2026
May 6, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
IBM UrbanCode Deploy (UCD) versions up to 7.3.0.1 could disclose sensitive password information during a manual edit of the agentrelay.properties file. IBM X-Force ID: 240148.
CVE-2023-22687
1Freesoul Deactivate Plugins Plugin Manager And Cleanup Project
1Freesoul Deactivate Plugins Plugin Manager And Cleanup
Jun 17, 2026
Apr 16, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Insecure Storage of Sensitive Information vulnerability in Jose Mortellaro Freesoul Deactivate Plugins – Plugin manager and cleanup plugin <= 1.9.4.0 versions.
CVE-2023-0580
1Abb
1My Control System
Jun 17, 2026
Apr 6, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Insecure Storage of Sensitive Information vulnerability in ABB My Control System (on-premise) allows an attacker who successfully exploited this vulnerability to gain access to the secure application data or take control...Show more
Insecure Storage of Sensitive Information vulnerability in ABB My Control System (on-premise) allows an attacker who successfully exploited this vulnerability to gain access to the secure application data or take control of the application. Of the services that make up the My Control System (on-premise) application, the following ones are affected by this vulnerability: User Interface System Monitoring1 Asset Inventory This issue affects My Control System (on-premise): from 5.0;0 through 5.13. Show less
CVE-2022-39043
1Juiker
1Juiker
Jun 17, 2026
Mar 27, 2023
N/A· v4
2.4 LOW· v3
N/A· v2
Juiker app stores debug logs which contains sensitive information to mobile external storage. An unauthenticated physical attacker can access these files to acquire partial user information such as personal contacts.
CVE-2023-23522
1Apple
1Macos
Jun 17, 2026
Feb 27, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Ventura 13.2.1. An app may be able to observe unprotected user data.
CVE-2022-38090
1Intel
227Celeron J1750 Firmware
Celeron J1800 FirmwareCeleron J1850 Firmware+224 more
Jun 17, 2026
Feb 16, 2023
N/A· v4
4.4 MEDIUM· v3
N/A· v2
Improper isolation of shared resources in some Intel(R) Processors when using Intel(R) Software Guard Extensions may allow a privileged user to potentially enable information disclosure via local access.